Ecosystem	Package	Version

Vulnerabilities

CVE-2025-40204

CVE-2025-40204

In the Linux kernel, the following vulnerability has been resolved: sctp: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this.

Published Nov 14, 2025

https://lore.kernel.org/linux-cve-announce/2025111247-CVE-2025-40204-0f06@gregkh/

CVSS ScoreMedium

6.9

Ecosystem	Package	Version


rpm	kernel	2.6.32-131.0.15.el6
rpm	kernel	2.6.32-131.12.1.el6
rpm	kernel	2.6.32-131.17.1.el6
rpm	kernel	2.6.32-131.2.1.el6
rpm	kernel	2.6.32-131.21.1.el6
rpm	kernel	2.6.32-131.4.1.el6
rpm	kernel	2.6.32-131.6.1.el6
rpm	kernel	2.6.32-220.13.1.el6
rpm	kernel	2.6.32-220.17.1.el6
rpm	kernel	2.6.32-220.2.1.el6
rpm	kernel	2.6.32-220.23.1.el6
rpm	kernel	2.6.32-220.4.1.el6
rpm	kernel	2.6.32-220.4.2.el6
rpm	kernel	2.6.32-220.7.1.el6
rpm	kernel	2.6.32-220.el6
rpm	kernel	2.6.32-279.1.1.el6
rpm	kernel	2.6.32-279.11.1.el6
rpm	kernel	2.6.32-279.14.1.el6
rpm	kernel	2.6.32-279.19.1.el6
rpm	kernel	2.6.32-279.2.1.el6
rpm	kernel	2.6.32-279.22.1.el6
rpm	kernel	2.6.32-279.5.1.el6
rpm	kernel	2.6.32-279.5.2.el6
rpm	kernel	2.6.32-279.9.1.el6
rpm	kernel	2.6.32-279.el6
rpm	kernel	2.6.32-358.0.1.el6
rpm	kernel	2.6.32-358.11.1.el6
rpm	kernel	2.6.32-358.14.1.el6
rpm	kernel	2.6.32-358.18.1.el6
rpm	kernel	2.6.32-358.2.1.el6
rpm	kernel	2.6.32-358.23.2.el6
rpm	kernel	2.6.32-358.6.1.el6
rpm	kernel	2.6.32-358.6.2.el6
rpm	kernel	2.6.32-358.el6
rpm	kernel	2.6.32-431.1.2.el6
rpm	kernel	2.6.32-431.11.2.el6
rpm	kernel	2.6.32-431.17.1.el6
rpm	kernel	2.6.32-431.20.3.el6
rpm	kernel	2.6.32-431.20.5.el6
rpm	kernel	2.6.32-431.23.3.el6
rpm	kernel	2.6.32-431.29.2.el6
rpm	kernel	2.6.32-431.3.1.el6
rpm	kernel	2.6.32-431.5.1.el6
rpm	kernel	2.6.32-431.el6
rpm	kernel	2.6.32-504.1.3.el6
rpm	kernel	2.6.32-504.12.2.el6
rpm	kernel	2.6.32-504.16.2.el6
rpm	kernel	2.6.32-504.23.4.el6
rpm	kernel	2.6.32-504.3.3.el6
rpm	kernel	2.6.32-504.30.3.el6

CVE-2025-40204 | Components Impacted | Sonatype Guide | Sonatype Guide